Cryptology ePrint Archive: Report 2010/308

Attacking M&M Collective Signature Scheme

Michal Rjaško and Martin Stanek

Abstract: A collective signature scheme aims to solve the problem of signing a message by multiple
signers. Recently, Moldovyan and Moldovyan [1] proposed a scheme for
collective signatures based on Schnorr signatures. We show some security weaknesses of the scheme.